| Package | Affected versions | Patched versions |
|---|---|---|
| worldserver | < 11.7.3 | 11.7.3 |
An issue was discovered in RWS WorldServer before 11.7.3. An authenticated, remote attacker can perform a ws-legacy/load_dtd?system_id= blind SSRF attack to deploy JSP code to the Apache Axis service running on the localhost interface, leading to command execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free